5013 matches found
XWiki 3.5-milestone-1 < 14.10.9, 15.0 < 15.3 Information Disclosure Vulnerability (GHSA-g9w4-prf3-m25g)
Xwiki is prone to a information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
XWiki 14.6-rc-1 < 14.10.4 Code Injection Vulnerability (GHSA-663w-2xp3-5739)
Xwiki is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...
XWiki < 14.10.6, 15.0-rc-1 < 15.1 Privilege Escalation Vulnerability (GHSA-35j5-m29r-xfq5)
Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...
XWiki 1.0 < 14.10.7, 15.0 < 15.2 CSRF Vulnerability (GHSA-hgpw-6p4h-j6h5)
Xwiki is prone to an cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
XWiki 9.4-rc-1 < 14.10.8, 15.0-rc-1 < 15.3 Information Disclosure Vulnerability (GHSA-gh64-qxh5-4m33)
Xwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
XWiki 3.5-milestone-1 < 14.10.8, 15.0-rc-1 < 15.3 XSS Vulnerability (GHSA-vcvr-v426-3m3m)
Xwiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
GHSA-4JQ9-2XHW-JPX7 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
Attacker can cause Kyverno user to unintentionally consume insecure image
An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno fetch their images from. The attacker could then return a vulnerable image to the the user and leverage th...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: ip-masq-agent, nodetaint, aws-efs-csi-driver, kubernetes-dns-node-cache, prometheus-adapter, spark-operator...
GHSA-8PGV-569H-W5RW vulnerabilities
Vulnerabilities for packages: prometheus-adapter-fips, kubevela, rancher-webhook-fips, cri-tools, temporal-server, docker-compose, volume-modifier-for-k8s, metrics-server-fips, metrics-server, kubescape, aws-ebs-csi-driver, kubernetes-csi-external-resizer, envoy-ratelimit, temporal-server-fips,...
GHSA-4QHC-V8R6-8VWM vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-WF5P-G6VW-RHXX vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
Fedora 39 : python-fastapi / python-starlette (2023-a96ec52457)
The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-a96ec52457 advisory. Update python-starlette to 0.27.0 and python-fastapi to 0.95.2. Fixes GHSA-v5gw-mw7f-84px Path traversal vulnerability in StaticFiles. Tenable has extracted...
MAL-2023-8466 Malicious code in turbolinks-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54430362bf4de07fb5f82d6de95632bb22951198c05b2242a0a547dc4771b72c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-MR45-RX8Q-WCM9 vulnerabilities
Vulnerabilities for packages: k3s, nats-server, minio, nats...
GHSA-5WJ4-WFFQ-3378 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-5WJ4-WFFQ-3378 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-FP9F-44C2-CW27 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...